Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163313a3a2f34382d3438203d3e20343031353037.roa
File: 326131343a373538343a363163313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier: jNAnE2ftexKfeUZFqa51W8WJ+TWLz7J2IjdrItc9bSg=
Subject key identifier: 8A:66:17:48:D0:23:6D:09:12:FF:88:8F:6A:C3:22:53:07:91:CE:96
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 4A17C71989BEF1BF7940DCE0A60973177FEB0B3B
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163313a3a2f34382d3438203d3e20343031353037.roa
Signing time: Mon 12 May 2025 16:18:08 +0000
ROA not before: Mon 12 May 2025 16:13:08 +0000
ROA not after: Mon 11 May 2026 16:18:08 +0000
asID: 401507
IP address blocks: 2a14:7584:61c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:17:c7:19:89:be:f1:bf:79:40:dc:e0:a6:09:73:17:7f:eb:0b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 12 16:13:08 2025 GMT
Not After : May 11 16:18:08 2026 GMT
Subject: CN=8A661748D0236D0912FF888F6AC322530791CE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:66:8a:c9:97:77:99:3f:f8:f0:81:22:9d:
d0:f2:33:0a:b9:79:6a:12:68:0a:ab:c2:6a:e7:4e:
04:5c:8f:c5:9a:6d:3b:0a:6b:0b:b6:18:e6:0d:ce:
6e:ec:a7:48:27:64:6b:a2:9f:52:9d:2c:cc:85:a0:
3b:31:42:3b:d8:7d:eb:d3:09:7a:f7:2a:e4:70:cf:
0e:44:86:c2:31:5c:5e:f2:c6:86:af:59:60:fd:54:
eb:5b:f5:52:ad:b5:32:2f:9f:fc:38:5d:c8:c2:bb:
f6:50:87:90:35:1f:22:0d:1a:47:a5:9f:37:cc:ef:
c3:c0:73:aa:46:67:c8:13:c9:ba:52:82:3a:4e:40:
7c:09:46:11:99:fd:c7:e2:fd:53:3c:12:f4:b0:4d:
15:f7:98:de:7d:f5:b6:09:e6:36:c7:31:fd:7a:bf:
fc:c7:32:2d:90:b5:a3:13:4a:ef:c2:9a:2d:e3:7a:
6a:54:e3:7b:64:86:c4:b7:47:1b:e9:e6:aa:6b:f3:
5f:2a:0d:95:ea:d2:f4:26:78:34:02:e0:e1:a8:b0:
47:18:a5:51:77:b1:60:1c:6b:16:ec:10:87:67:67:
77:a8:7e:d8:c1:d9:20:e5:82:b6:fb:03:f1:4a:47:
24:7e:33:29:ed:94:5a:5c:1d:1f:f2:70:d1:cf:b3:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:66:17:48:D0:23:6D:09:12:FF:88:8F:6A:C3:22:53:07:91:CE:96
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363163313a3a2f34382d3438203d3e20343031353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:61c1::/48
Signature Algorithm: sha256WithRSAEncryption
a1:ed:ba:7b:66:69:0c:ca:0a:ab:71:6f:75:20:bb:71:0a:5b:
07:87:1e:0c:93:46:c0:3d:e0:ab:8e:2d:91:a3:cd:f6:25:43:
ca:9b:1c:6c:98:fc:86:a0:61:36:24:b2:ce:6d:fc:61:4a:c2:
4b:b7:7f:a8:00:21:03:9e:43:97:62:11:3c:2e:66:45:42:4a:
b7:50:df:1f:24:45:7b:25:93:dd:cb:57:63:71:31:12:94:0b:
cb:70:02:e6:a9:80:87:1b:5c:12:2b:c5:aa:63:14:5f:f0:8b:
82:27:66:2d:71:98:43:63:b7:61:f0:9a:14:cb:75:d7:50:9b:
95:10:10:84:3b:dd:22:e3:2a:f0:8f:a7:1f:87:e3:55:cc:f9:
61:64:8f:b1:a5:d3:21:6f:ab:48:46:c6:5b:3e:c3:df:1d:31:
ee:20:9c:fb:ea:c4:d5:72:b9:ba:16:e9:00:29:49:f4:76:0e:
85:cb:9e:a8:18:34:86:cf:d5:5f:06:63:78:38:87:ff:1c:12:
ab:7a:f6:6b:a9:b7:69:4d:03:5a:e5:4c:48:40:8c:a2:db:c8:
f0:70:77:e5:6c:97:47:9e:e1:c1:a8:1b:6b:b5:71:3d:0a:ad:
d8:3b:ab:8c:6e:41:89:be:fd:2e:0b:44:15:2a:bc:5b:6f:b6:
5e:55:c3:52
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUShfHGYm+8b95QNzgpglzF3/rCzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MTIxNjEzMDhaFw0yNjA1MTExNjE4MDhaMDMxMTAvBgNV
BAMTKDhBNjYxNzQ4RDAyMzZEMDkxMkZGODg4RjZBQzMyMjUzMDc5MUNFOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoI2aKyZd3mT/48IEindDyMwq5
eWoSaAqrwmrnTgRcj8WabTsKawu2GOYNzm7sp0gnZGuin1KdLMyFoDsxQjvYfevT
CXr3KuRwzw5EhsIxXF7yxoavWWD9VOtb9VKttTIvn/w4XcjCu/ZQh5A1HyINGkel
nzfM78PAc6pGZ8gTybpSgjpOQHwJRhGZ/cfi/VM8EvSwTRX3mN599bYJ5jbHMf16
v/zHMi2QtaMTSu/Cmi3jempU43tkhsS3Rxvp5qpr818qDZXq0vQmeDQC4OGosEcY
pVF3sWAcaxbsEIdnZ3eoftjB2SDlgrb7A/FKRyR+MyntlFpcHR/ycNHPs1qfAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUimYXSNAjbQkS/4iPasMiUweRzpYwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2MzE2MzMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hGHB
MA0GCSqGSIb3DQEBCwUAA4IBAQCh7bp7ZmkMygqrcW91ILtxClsHhx4Mk0bAPeCr
ji2Ro832JUPKmxxsmPyGoGE2JLLObfxhSsJLt3+oACEDnkOXYhE8LmZFQkq3UN8f
JEV7JZPdy1djcTESlAvLcALmqYCHG1wSK8WqYxRf8IuCJ2YtcZhDY7dh8JoUy3XX
UJuVEBCEO90i4yrwj6cfh+NVzPlhZI+xpdMhb6tIRsZbPsPfHTHuIJz76sTVcrm6
FukAKUn0dg6Fy56oGDSGz9VfBmN4OIf/HBKrevZrqbdpTQNa5UxIQIyi28jwcHfl
bJdHnuHBqBtrtXE9Cq3YO6uMbkGJvv0uC0QVKrxbb7ZeVcNS
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:08 2025 by rpki-client